πΉπ·
neron
2026-08-10 06:29:22
(1 week ago)
CrowdSec blocked: http:exploit detected via OPNsense firewall
Hacking
Web App Attack
π©πͺ
maxpower
2026-08-07 19:51:13
(1 week ago)
(backdoor_scan) REGOLA 7 - Backdoor Scan Attempt 45.86.203.221 (GB/United Kingdom/-): 1 in the last ...
show more
(backdoor_scan) REGOLA 7 - Backdoor Scan Attempt 45.86.203.221 (GB/United Kingdom/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 45.86.203.221 - - [07/Aug/2026:21:51:08 +0200] "GET /bless.php HTTP/1.1" 301 279 "-" "Go-http-client/1.1" "45.86.203.221" host=villapardi.it
show less
Port Scan
π©πͺ
hchristo
2026-08-07 14:09:21
(2 weeks ago)
[Fri Aug 07 16:09:19.512443 2026] [proxy_fcgi:error] [pid 63537:tid 63558] [remote 45.86.203.221:296 ...
show more
[Fri Aug 07 16:09:19.512443 2026] [proxy_fcgi:error] [pid 63537:tid 63558] [remote 45.86.203.221:29647] AH01071: Got error 'Primary script unknown', referer: http://domaincheck.hchristo.de/bless.php#888xyz999
[Fri Aug 07 16:09:20.238260 2026] [proxy_fcgi:error] [pid 63537:tid 63569] [remote 45.86.203.221:29647] AH01071: Got error 'Primary script unknown', referer: http://domaincheck.hchristo.de/class-t.api.php#888xyz999
[Fri Aug 07 16:09:20.672674 2026] [proxy_fcgi:error] [pid 63537:tid 63552] [remote 45.86.203.221:29647] AH01071: Got error 'Primary script unknown', referer: http://domaincheck.hchristo.de/blurbs.php#888xyz999
[Fri Aug 07 16:09:20.969932 2026] [proxy_fcgi:error] [pid 63537:tid 63545] [remote 45.86.203.221:29647] AH01071: Got error 'Primary script unknown', referer: http://domaincheck.hchristo.de/akcc.php
[Fri Aug 07 16:09:21.267021 2026] [proxy_fcgi:error] [pid 63537:tid 63561] [remote 45.86.203.221:29647] AH01071: Got error 'Primary script unknown', referer: http://dom
...
show less
Brute-Force
πΉπ·
neron
2026-08-06 06:29:43
(2 weeks ago)
CrowdSec blocked: http:exploit detected via OPNsense firewall
Hacking
Web App Attack
π©πͺ
pscriptos
2026-08-04 12:12:02
(2 weeks ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
πΊπΈ
raymarron.com
2026-07-31 23:23:50
(2 weeks ago)
/wp-content/index.php
Web App Attack
π³π±
WeCloudit-Anti-Abuse
2026-07-28 06:48:18
(3 weeks ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
π¬π§
thetomtaylor.co.uk
2026-07-24 19:07:02
(3 weeks ago)
Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [ice01,ice02,mx01,mx02,w ...
show more
Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [ice01,ice02,mx01,mx02,wa01,wa02]
show less
Bad Web Bot
Web App Attack
π©πͺ
Skyrider
2026-07-24 13:20:14
(4 weeks ago)
Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.
Bad Web Bot
Web App Attack
π©πͺ
hchristo
2026-07-23 10:31:13
(4 weeks ago)
[Thu Jul 23 12:31:10.112945 2026] [proxy_fcgi:error] [pid 64361:tid 64397] [remote 45.86.203.221:428 ...
show more
[Thu Jul 23 12:31:10.112945 2026] [proxy_fcgi:error] [pid 64361:tid 64397] [remote 45.86.203.221:42839] AH01071: Got error 'Primary script unknown', referer: http://holzenberger.de/ms-themes.php
[Thu Jul 23 12:31:11.002060 2026] [proxy_fcgi:error] [pid 64361:tid 64376] [remote 45.86.203.221:42839] AH01071: Got error 'Primary script unknown', referer: http://holzenberger.de/chosen.php?p=
[Thu Jul 23 12:31:11.588598 2026] [proxy_fcgi:error] [pid 64361:tid 64370] [remote 45.86.203.221:42839] AH01071: Got error 'Primary script unknown', referer: http://holzenberger.de/file.php
[Thu Jul 23 12:31:12.256930 2026] [proxy_fcgi:error] [pid 64361:tid 64378] [remote 45.86.203.221:42839] AH01071: Got error 'Primary script unknown', referer: http://holzenberger.de/flower.php
[Thu Jul 23 12:31:12.494571 2026] [proxy_fcgi:error] [pid 64361:tid 64395] [remote 45.86.203.221:42839] AH01071: Got error 'Primary script unknown', referer: http://holzenberger.de/gifclass.php#888xyz999
...
show less
Brute-Force
π«π·
Octopuce
2026-07-23 05:37:22
(4 weeks ago)
Aggressive web search of vulnerable pages: /ms-themes.php /chosen.php /file.php /flower.php /gifclas ...
show more
Aggressive web search of vulnerable pages: /ms-themes.php /chosen.php /file.php /flower.php /gifclass.php /bless.php /class-t.api.php /blurbs.p ...
show less
Web App Attack
π©πͺ
8legz.net
2026-07-23 03:55:21
(4 weeks ago)
[Thu Jul 23 04:55:20.341384 2026] [php:error] [pid 1829795] [client 45.86.203.221:29911] script '/va ...
show more
[Thu Jul 23 04:55:20.341384 2026] [php:error] [pid 1829795] [client 45.86.203.221:29911] script '/var/www/html/akcc.php' not found or unable to stat, referer: http://8legz.net/akcc.php
[Thu Jul 23 04:55:20.589525 2026] [php:error] [pid 1829795] [client 45.86.203.221:29911] script '/var/www/html/abcd.php' not found or unable to stat, referer: http://8legz.net/abcd.php
[Thu Jul 23 04:55:20.836364 2026] [php:error] [pid 1829795] [client 45.86.203.221:29911] script '/var/www/html/shelp.php' not found or unable to stat, referer: http://8legz.net/shelp.php
...
show less
Brute-Force
ππΊ
bcsaba
2026-07-22 10:22:44
(4 weeks ago)
Suricata: Alert - ET INFO Go-http-client User-Agent Observed Inbound
Web App Attack
πͺπΈ
masterguru
2026-07-03 03:01:43
(1 month ago)
BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ...
show more
BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-122)
show less
Bad Web Bot
π¬π§
consul.to
2026-07-03 01:45:51
(1 month ago)
Web attack/malicious scanning detected
Web App Attack